7226dec74e6ae20fffca898740b834ebe2071524d69018c5cfe1232ad126c4fc

Analysis

max time kernel
149s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 00:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
unpaid_69f6.js
Size 70KB
Sample260910-ajpfkavsaz
SHA256 7226dec74e6ae20fffca898740b834ebe2071524d69018c5cfe1232ad126c4fc
MD5 c2e9475e9d2ec5fe5cac49aa40c8a012
SHA1 24955f97b83e5258ddf6fca4fc6212fea0ddc91d
SHA512 bdd2177fdf365136c7d456aef428e9a35f77e7ff96f9c0af11b08ffb3005d8ef84bbdab6017c839c981c77d2a7aeca5cd890a337456907957158e6fc49bba848
SSDEEP 384:YKGHGBqQGj27usGgiCwI+QF52GDA9Q4JO0457eMRujVsArkzzEy5JWc/WGn57Wm0:Iths55uaaBI1I42iunD7O3tSwphqh9L
TLSH
T10863D10E425F4B16AB42DB64E55CCDE759C48EC2D13061E4905AFE1F28F980A6FEF0B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Signatures

Badlisted process makes network request 27 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
4	1188	wscript.exe
7	1188	wscript.exe
8	1188	wscript.exe
13	1188	wscript.exe
14	1188	wscript.exe
15	1188	wscript.exe
17	1188	wscript.exe
18	1188	wscript.exe
19	1188	wscript.exe
20	1188	wscript.exe
23	1188	wscript.exe
24	1188	wscript.exe
25	1188	wscript.exe
26	1188	wscript.exe
27	1188	wscript.exe
28	1188	wscript.exe
29	1188	wscript.exe
30	1188	wscript.exe
31	1188	wscript.exe
32	1188	wscript.exe
33	1188	wscript.exe
34	1188	wscript.exe
35	1188	wscript.exe
36	1188	wscript.exe
37	1188	wscript.exe
38	1188	wscript.exe
39	1188	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\unpaid_69f6.js
1⤵
- Badlisted process makes network request
PID:1188

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

yi9M7OiWUEydW

Path C:\Users\Admin\AppData\Local\Temp\yi9M7OiWUEydW
Size 7KB
SHA256 9549e1b85448d152122d5272b3b76af452008def898639f29ecb7c4db73a0821
MD5 85bb84c73be97f9f67a68075d94073c6
SHA1 e527db20763f4961dfb15133db748098d4894888
SHA512 caed3f381ae0032c90fc541c59b8a3dd849696839377e1abe808ed7782b233a92b1e0e59109b288063b933a0e7843fa5b93bbce920ea5de76c62b67c593789f7
SSDEEP 192:uUNO+EtfllhKNw6OzyNDCtPtPHeI3RG/s:uUNO+EtfllD6OzPtPHeI3RG/s
TLSH
T118F1623764F440270142E0963F36B34EE9E3CA0B8B56EA8176ED46855FD7AA58C9364C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download